KeUnstackDetachProcess
VOID __stdcall KeUnstackDetachProcess(PRKAPC_STATE ApcState){
_EPROCESS *Process;
Process = ApcState->Process;
if( Process != (_EPROCESS *)1 )
{
if( !Process )
ApcState = (PRKAPC_STATE)((char *)KeGetCurrentThread() + 600);
KiDetachProcess(ApcState, 0i64);
}
}Referenced by:
CmpStartCLFSLog
DbgkpPostFakeThreadMessages
EtwpEnableGuid
KiLogUserCetSetContextIpValidationFailureWorker
MiAllocateUserPhysicalPages
MiDeleteAllHardwareEnclaves
MmQueryVirtualMemory
NtFreeUserPhysicalPages
NtGetWriteWatch
NtInitializeEnclave
NtLoadEnclaveData
NtLockVirtualMemory
NtProtectVirtualMemory
NtPssCaptureVaSpaceBulk
NtQueryInformationProcess
NtResetWriteWatch
NtSetInformationProcess
NtSetInformationVirtualMemory
NtUnlockVirtualMemory
PfSnAppLaunchScenarioControl
PsCreateMinimalProcess
PspAllocateProcess
PspApplyWorkingSetLimits
PspProcessDynamicEnforcedAddressRanges
PspQueryQuotaLimits
PspSetQuotaLimits